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Abstract 


This memo describes a possible testing strategy for RTP (real-time 
transport protocol) implementations. 
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1 Introduction 


This memo describes a possible testing strategy for RTP [1] 
implementations. The tests are intended to help demonstrate 
interoperability of multiple implementations, and to illustrate 
common implementation errors. They are not intended to be an 
exhaustive set of tests and passing these tests does not necessarily 
imply conformance to the complete RIP specification. 


2 End systems 


The architecture for testing RTP end systems is shown in Figure 1. 


sa catia gs aca acaba aaa + 
Pees + Test instrument +----- + 
seen + 
t------— fhem + ponn ptni + 
| First RTP | | Second RTP | 
| implementation | | implementation | 
FES + tans + 
Figure 1: Testing architecture 


Both RTP implementations send packets to the test instrument, which 
forwards packets from one implementation to the other. Unless 
otherwise specified, packets are forwarded with no additional delay 


and without loss. The test instrument is required to delay or 
discard packets in some of the tests. The test instrument is 
invisible to the RTP implementations - it merely simulates poor 


network conditions. 


The test instrument is also capable of logging packet contents for 
inspection of their correctness. 


A typical test setup might comprise three machines on a single 
Ethernet segment. Two of these machines run the RTP implementations, 
the third runs the test instrument. The test instrument is an 
application level packet forwarder. Both RIP implementations are 
instructed to send unicast RTP packets to the test instrument, which 
forwards packets between them. 
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2.1 Media transport 
The aim of these tests is to show that basic media flows can be 
exchanged between the two RTP implementations. The initial test is 
for the first RTP implementation to transmit and the second to 
receive. If this succeeds, the process is reversed, with the second 
implementation sending and the first receiving. 


The receiving application should be able to handle the following edge 
cases, in addition to normal operation: 


o Verify reception of packets which contain padding. 

o Verify reception of packets which have the marker bit set 

o Verify correct operation during sequence number wrap-around. 
o Verify correct operation during timestamp wrap-around. 


o Verify that the implementation correctly differentiates packets 
according to the payload type field. 


o Verify that the implementation ignores packets with unsupported 
payload types 


o Verify that the implementation can playout packets containing a 
CSRC list and non-zero CC field (see section 4). 


The sending application should be verified to correctly handle the 
following edge cases: 


o If padding is used, verify that the padding length indicator 
(last octet of the packet) is correctly set and that the length 
of the data section of the packet corresponds to that of this 
particular payload plus the padding. 


o Verify correct handling of the M bit, as defined by the 
profile. 


o Verify that the SSRC is chosen randomly. 


o Verify that the initial value of the sequence number is 
randomly selected. 


o Verify that the sequence number increments by one for each 
packet sent. 


o Verify correct operation during sequence number wrap-around. 
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o Verify that the initial value of the timestamp is randomly 
selected. 


o Verify correct increment of timestamp (dependent on the payload 
format). 


o Verify correct operation during timestamp wrap-around. 


o Verify correct choice of payload type according to the chosen 
payload format, profile and any session level control protocol. 


2.2 RTP Header Extension 


An RTP implementation which does not use an extended header should be 
able to process packets containing an extension header by ignoring 
the extension. 


If an implementation makes use of the header extension, it should be 
verified that the profile specific field and the length field of the 
extension are set correctly, and that the length of the packet is 
consistent. 


2.3 Basic RTCP 


An RTP implementation is required to send RTCP control packets in 
addition to data packets. The architecture for testing basic RTCP 
functions is that shown in Figure 1. 


2.3.1 Sender and receiver reports 


The first test requires both implementations to be run, but neither 
sends data. It should be verified that RTCP packets are generated by 
each implementation, and that those packets are correctly received by 
the other implementation. It should also be verified that: 


o all RTCP packets sent are compound packets 
o all RTCP compound packets start with an empty RR packet 
o all RICP compound packets contain an SDES CNAME packet 


The first implementation should then be made to transmit data 
packets. It should be verified that that implementation now 
generates SR packets in place of RR packets, and that the second 
application now generates RR packets containing a single report 
block. It should be verified that these SR and RR packets are 
correctly received. The following features of the SR packets should 
also be verified: 
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that the length field is consistent with both the length of the 
packet and the RC field 


that the SSRC in SR packets is consistent with that in the RTP 
data packets 


that the NTP timestamp in the SR packets is sensible (matches 
the wall clock time on the sending machine) 


that the RTP timestamp in the SR packets is consistent with 
that in the RTP data packets 


that the packet and octet count fields in the SR packets are 
consistent with the number of RTP data packets transmitted 


In addition, the following features of the RR packets should also be 
verified: 


(0) 


Perkins, 


that the SSRC in the report block is consistent with that in 
the data packets being received 


that the fraction lost is zero 
that the cumulative number of packets lost is zero 


that the extended highest sequence number received is 
consistent with the data packets being received (provided the 
round trip time between test instrument and receiver is smaller 
than the packet inter-arrival time, this can be directly 
checked by the test instrument). 


that the interarrival jitter is small (a precise value cannot 
be given, since it depends on the test instrument and network 
conditions, but very little jitter should be present in this 
scenario). 


that the last sender report timestamp is consistent with that 
in the SR packets (i.e., each RR passing through the test 
instrument should contain the middle 32 bits from the 64 bit 
NTP timestamp of the last SR packet which passed through the 
test instrument in the opposite direction). 


that the delay since last SR field is sensible (an estimate may 
be made by timing the passage of an SR and corresponding RR 
through the test instrument, this should closely agree with the 
DLSR field) 


et al. Informational [Page 5] 


RFC 3158 RTP Testing Strategies August 2001 


It should also be verified that the timestamps, packet count and 
octet count correctly wrap-around after the appropriate interval. 


The next test is to show behavior in the presence of packet loss. 
The first implementation is made to transmit data packets, which are 
received by the second implementation. This time, however, the test 
instrument is made to randomly drop a small fraction (1% is 


suggested) of the data packets. The second implementation should be 
able to receive the data packets and process them in a normal manner 
(with, of course, some quality degradation). The RR packets should 


show a loss fraction corresponding to the drop rate of the test 
instrument and should show an increasing cumulative number of packets 
lost. 


The loss rate in the test instrument is then returned to zero and it 
is made to delay each packet by some random amount (the exact amount 
depends on the media type, but a small fraction of the average 
interarrival time is reasonable). The effect of this should be to 
increase the reported interarrival jitter in the RR packets. 


If these tests succeed, the process should be repeated with the 
second implementation transmitting and the first receiving. 


2.3.2 RTCP source description packets 


Both implementations should be run, but neither is required to 
transmit data packets. The RTCP packets should be observed and it 
should be verified that each compound packet contains an SDES packet, 
that that packet contains a CNAME item and that the CNAME is chosen 
according to the rules in the RTP specification and profile (in many 
cases the CNAME should be of the form ‘example@10.0.0.1’ but this may 
be overridden by a profile definition). 


If an application supports additional SDES items then it should be 
verified that they are sent in addition to the CNAME with some SDES 
packets (the exact rate at which these additional items are included 
is dependent on the application and profile). 


It should be verified that an implementation can correctly receive 
NAME, EMAIL, PHONE, LOC, NOTE, TOOL and PRIV items, even if it does 
not send them. This is because it may reasonably be expected to 
interwork with other implementations which support those items. 
Receiving and ignoring such packets is valid behavior. 


It should be verified that an implementation correctly sets the 
length fields in the SDES items it sends, and that the source count 
and packet length fields are correct. It should be verified that 
SDES fields are not zero terminated. 
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It should be verified that an implementation correctly receives SDES 
items which do not terminate in a zero byte. 


2.3.3 RTCP BYE packets 


Both implementations should be run, but neither is required to 
transmit data packets. The first implementation is then made to exit 
and it should be verified that an RTCP BYE packet is sent. It should 
be verified that the second implementation reacts to this BYE packet 
and notes that the first implementation has left the session. 


If the test succeeds, the implementations should be restarted and the 
process repeated with the second implementation leaving the session. 


It should be verified that implementations handle BYE packets 
containing the optional reason for leaving text (ignoring the text is 
acceptable). 


2.3.4 Application defined RTCP packets 


Tests for the correct response to application defined packets are 
difficult to specify, since the response is clearly implementation 
dependent. It should be verified that an implementation ignores APP 
packets where the 4 octet name field is unrecognized. 
Implementations which use APP packets should verify that they behave 
as expected. 


2.4 RTCP transmission interval 


The basic architecture for performing tests of the RTCP transmission 
interval is shown in Figure 2. 


The test instrument is connected to the same LAN as the RIP 
implementation being tested. It is assumed that the test instrument 
is preconfigured with the addresses and ports used by the RTP 
implementation, and is also aware of the RTCP bandwidth and 
sender/receiver fractions. The tests can be conducted using either 
multicast or unicast. 


The test instrument must be capable of sending arbitrarily crafted 
RTP and RTCP packets to the RTP implementation. The test instrument 
should also be capable of receiving packets sent by the RTP 
implementation, parsing them, and computing metrics based on those 
packets. 
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+-------------- + 
| test | 
| instrument | 
+----- +-------- + 
------ $-----------4-------------- LAN 
+------- +-------- + 
RTP 
implementation 
+---------------- + 
Figure 2: Testing architecture for RTCP 


It is furthermore assumed that a number of basic controls over the 
RTP implementation exist. These controls are: 


o the ability to force the implementation to send or not send RTP 
packets at any desired point in time 


o the ability to force the application to terminate its 
involvement in the RTP session, and for this termination to be 


known immediately to the test instrument 


o the ability to set the session bandwidth and RTCP sender and 
receiver fractions 


The second of these is required only for the test of BYE 
reconsideration, and is the only aspect of these tests not easily 
implementable by pure automation. It will generally require manual 
intervention to terminate the session from the RTP implementation and 
to convey this to the test instrument through some non-RTP means. 


2.4.1 Basic Behavior 


The first test is to verify basic correctness of the implementation 
of the RTCP transmission rules. This basic behavior consists of: 


O periodic transmission of RTCP packets 
o randomization of the interval for RTCP packet transmission 


o correct implementation of the randomization interval 
computations, with unconditional reconsideration 
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The RTP implementation acts as a receiver, and never sends any RTP 
data packets. The implementation is configured with a large session 
bandwidth, say 1 Mbit/s. This will cause the implementation to use 
the minimal interval of 5s rather than the small interval based on 
the session bandwidth and membership size. The implementation will 
generate RTCP packets at this minimal interval, on average. The test 
instrument generates no packets, but receives the RTCP packets 
generated by the implementation. When an RTCP packet is received, 
the time is noted by the test instrument. The difference in time 
between each pair of subsequent packets (called the interval) is 
computed. These intervals are stored, so that statistics based on 
these intervals can be computed. It is recommended that this 
observation process operate for at least 20 minutes. 


An implementation passes this test if the intervals have the 
following properties: 


o the minimum interval is never less than 2 seconds or more than 
2.5 seconds; 


o the maximum interval is never more than 7 seconds or less than 
5.5 seconds; 


o the average interval is between 4.5 and 5.5 seconds; 


o the number of intervals between x and x+500ms is less than the 
number of intervals between x+500ms and x+1s, for any x. 


In particular, an implementation fails if the packets are sent with a 
constant interval. 


2.4.2 Step join backoff 


The main purpose of the reconsideration algorithm is to avoid a flood 
of packets that might occur when a large number of users 
simultaneously join an RTP session. Reconsideration therefore 
exhibits a backoff behavior in sending of RTCP packets when group 
sizes increase. This aspect of the algorithm can be tested in the 
following manner. 


The implementation begins operation. The test instrument waits for 
the arrival of the first RTCP packet. When it arrives, the test 
instrument notes the time and then immediately sends 100 RTCP RR 
packets to the implementation, each with a different SSRC and SDES 
CNAME. The test instrument should ensure that each RTCP packet is of 
the same length. The instrument should then wait until the next RTCP 
packet is received from the implementation, and the time of such 
reception is noted. 
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Without reconsideration, the next RTCP packet will arrive within a 
short period of time. With reconsideration, transmission of this 
packet will be delayed. The earliest it can arrive depends on the 
RTCP session bandwidth, receiver fraction, and average RTCP packet 
size. The RTP implementation should be using the exponential 
averaging algorithm defined in the specification to compute the 
average RICP packet size. Since this is dominated by the received 
packets (the implementation has only sent one itself), the average 
will be roughly equal to the length of the RTCP packets sent by the 
test instrument. Therefore, the minimum amount of time between the 
first and second RTCP packets from the implementation is: 


T> £01. *'S / ¢-B Ern = (e=1.5) * 25) 


Where S is the size of the RTCP packets sent by the test instrument, 
B is the RTCP bandwidth (normally five percent of the session 
bandwidth), Fr is the fraction of RTCP bandwidth allocated to 
receivers (normally 75 percent), and e is the natural exponent. 
Without reconsideration, this minimum interval Te would be much 
smaller: 


Te > MAX( [ S / (B * Fr * (e-1.5) * 2) ] , [ 2.5 / (e-1.5) ] ) 


B should be chosen sufficiently small so that T is around 60 seconds. 
Reasonable choices for these parameters are B = 950 bits per second, 
and S = 1024 bits. An implementation passes this test if the 
interval between packets is not less than T above, and not more than 
3 times T. 


Note: in all tests the value chosen for B, the RTCP bandwidth, is 
calculated including the lower layer UDP/IP headers. In a typical 
IPv4 based implementation, these comprise 28 octets per packet. A 
common mistake is to forget that these are included when choosing the 
size of packets to transmit. 


The test should be repeated for the case when the RIP implementation 
is a sender. This is accomplished by having the implementation send 
RTP packets at least once a second. In this case, the interval 
between the first and second RTCP packets should be no less than: 


T>S /(B* Fs * (e-1.5) * 2 ) 
Where Fs is the fraction of RTCP bandwidth allocated to senders, 


usually 25%. Note that this value of T is significantly smaller than 
the interval for receivers. 
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2.4.3 Steady State Behavior 


In addition to the basic behavior in section 2.4.1, an implementation 
should correctly implement a number of other, slightly more advanced 
features: 


o scale the RTCP interval with the group size; 
o correctly divide bandwidth between senders and receivers; 
o correctly compute the RTCP interval when the user is a sender 


The implementation begins operation as a receiver. The test 
instrument waits for the first RTCP packet from the implementation. 
When it arrives, the test instrument notes the time, and immediately 
sends 50 RTCP RR packets and 50 RTCP SR packets to the 
implementation, each with a different SSRC and SDES CNAME. The test 
instrument then sends 50 RTP packets, using the 50 SSRC from the RTCP 
SR packets. The test instrument should ensure that each RTCP packet 
is of the same length. The instrument should then wait until the 
next RTCP packet is received from the implementation, and the time of 
such reception is noted. The difference between the reception of the 
RTCP packet and the reception of the previous is computed and stored. 
In addition, after every RTCP packet reception, the 100 RTCP and 50 
RTP packets are retransmitted by the test instrument. This ensures 
that the sender and member status of the 100 users does not time out. 
The test instrument should collect the interval measurements figures 
for at least 100 RTCP packets. 


With 50 senders, the implementation should not try to divide the RTCP 
bandwidth between senders and receivers, but rather group all users 
together and divide the RTCP bandwidth equally. The test is deemed 
successful if the average RTCP interval is within 5% of: 


T = 101* S/B 


Where S is the size of the RTCP packets sent by the test instrument, 
and B is the RTCP bandwidth. B should be chosen sufficiently small 
so that the value of T is on the order of tens of seconds or more. 
Reasonable values are S=1024 bits and B=3.4 kb/s. 


The previous test is repeated. However, the test instrument sends 10 
RTP packets instead of 50, and 10 RTCP SR and 90 RTCP RR instead of 


50 of each. In addition, the implementation is made to send at least 
one RIP packet between transmission of every one of its own RTCP 
packets. 
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In this case, the average RTCP interval should be within 5% of: 
T= 11 * S / (B * Fs) 


Where S is the size of the RTCP packets sent by the test instrument, 
B is the RTCP bandwidth, and Fs is the fraction of RTCP bandwidth 
allocated for senders (normally 25%). The values for B and S should 
be chosen small enough so that T is on the order of tens of seconds. 
Reasonable choices are S=1024 bits and B=1.5 kb/s. 


2.4.4 Reverse Reconsideration 


The reverse reconsideration algorithm is effectively the opposite of 
the normal reconsideration algorithm. It causes the RTCP interval to 
be reduced more rapidly in response to decreases in the group 
membership. This is advantageous in that it keeps the RTCP 
information as fresh as possible, and helps avoids some premature 
timeout problems. 


In the first test, the implementation joins the session as a 
receiver. As soon as the implementation sends its first RTCP packet, 
the test instrument sends 100 RTCP RR packets, each of the same 
length S, and a different SDES CNAME and SSRC in each. It then waits 
for the implementation to send another RTCP packet. Once it does, 
the test instrument sends 100 BYE packets, each one containing a 
different SSRC, but matching an SSRC from one of the initial RTCP 
packets. Each BYE should also be the same size as the RTCP packets 
sent by the test instrument. This is easily accomplished by using a 
BYE reason to pad out the length. The time of the next RTCP packet 
from the implementation is then noted. The delay T between this (the 
third RTCP packet) and the previous should be no more than: 


Ts 3 F So (B = EFE (6s 5) F 2) 


Where S is the size of the RTCP and BYE packets sent by the test 
instrument, B is the RTCP bandwidth, Fr is the fraction of the RTCP 
bandwidth allocated to receivers, and e is the natural exponent. B 
should be chosen such that T is on the order of tens of seconds. A 
reasonable choice is S=1024 bits and B=168 bits per second. 


This test demonstrates basic correctness of implementation. An 
implementation without reverse reconsideration will not send its next 
RTCP packet for nearly 100 times as long as the above amount. 


In the second test, the implementation joins the session as a 
receiver. As soon as it sends its first RTCP packet, the test 
instrument sends 100 RTCP RR packets, each of the same length S, 
followed by 100 BYE packets, also of length S. Each RTCP packet 
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carries a different SDES CNAME and SSRC, and is matched with 
precisely one BYE packet with the same SSRC. This will cause the 
implementation to see a rapid increase and then rapid drop in group 
membership. 


The test is deemed successful if the next RTCP packet shows up T 
seconds after the first, and T is within: 


2.5 f -(6H1, 05). <T ST Sf (e=15) 


This tests correctness of the maintenance of the pmembers variable. 
An incorrect implementation might try to execute reverse 
reconsideration every time a BYE is received, as opposed to only when 
the group membership drops below pmembers. If an implementation did 
this, it would end up sending an RTCP packet immediately after 
receiving the stream of BYE’s. For this test to work, B must be 
chosen to be a large value, around 1Mb/s. 


2.4.5 BYE Reconsideration 


The BYE reconsideration algorithm works in much the same fashion as 
regular reconsideration, except applied to BYE packets. When a user 
leaves the group, instead of sending a BYE immediately, it may delay 
transmission of its BYE packet if others are sending BYE’s. 


The test for correctness of this algorithm is as follows. The RTP 
implementation joins the group as a receiver. The test instrument 
waits for the first RTCP packet. When the test instrument receives 
this packet, the test instrument immediately sends 100 RTCP RR 
packets, each of the same length S, and each containing a different 
SSRC and SDES CNAME. Once the test instrument receives the next RTCP 
packet from the implementation, the RTP implementation is made to 
leave the RTP session, and this information is conveyed to the test 
instrument through some non-RTP means. The test instrument then 
sends 100 BYE packets, each with a different SSRC, and each matching 
an SSRC from a previously transmitted RTCP packet. Each of these BYE 
packets is also of size S. Immediately following the BYE packets, 
the test instrument sends 100 RTCP RR packets, using the same 
SSRC/CNAMEs as the original 100 RTCP packets. 


The test is deemed successful if the implementation either never 
sends a BYE, or if it does, the BYE is received by the test 
instrument not earlier than T seconds, and not later than 3 * T 
seconds, after the implementation left the session, where T is: 


T= 100 S / (2 * (e-1.5) * B ) 
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S is the size of the RTCP and BYE packets, e is the natural exponent, 
B is the RTCP bandwidth, and Fr is the RTCP bandwidth fraction for 
receivers. S and B should be chosen so that T is on the order of 50 
seconds. A reasonable choice is S=1024 bits and B=1.1 kb/s. 


The transmission of the RTCP packets is meant to verify that the 
implementation is ignoring non-BYE RTCP packets once it decides to 
leave the group. 


2.4.6 Timing out members 


Active RIP participants are supposed to send periodic RTCP packets. 
When a participant leaves the session, they may send a BYE, however 
this is not required. Furthermore, BYE reconsideration may cause a 
BYE to never be sent. As a result, participants must time out other 
participants who have not sent an RTCP packet in a long time. 
According to the specification, participants who have not sent an 
RTCP packet in the last 5 intervals are timed out. This test 
verifies that these timeouts are being performed correctly. 


The RIP implementation joins a session as a receiver. The test 
instrument waits for the first RTCP packet from the implementation. 
Once it arrives, the test instrument sends 100 RTCP RR packets, each 
with a different SDES and SSRC, and notes the time. This will cause 
the implementation to believe that there are now 101 group 
participants, causing it to increase its RTCP interval. The test 
instrument continues to monitor the RTCP packets from the 
implementation. As each RTCP packet is received, the time of its 
reception is noted, and the interval between RTCP packets is stored. 
The 100 participants spoofed by the test instrument should eventually 
time out at the RTP implementation. This should cause the RTCP 
interval to be reduced to its minimum. 


The test is deemed successful if the interval between RTCP packets 
after the first is no less than: 


TH > LOL A Sf U2 Cea). FBO Ee) 


and this minimum interval is sustained no later than Td seconds after 
the transmission of the 100 RR’s, where Td is: 


Td = 7 * 101 * S / (B* Fr) 


and the interval between RTCP packets after this point is no less 
than: 


Tf > 2.5 / (e-1.5) 
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For this test to work, B and S must be chosen so Ti is on the order 
of minutes. Recommended values are S = 1024 bits and B = 1.9 kbps. 


2.4.7 Rapid SR’s 


The minimum interval for RTCP packets can be reduced for large 
session bandwidths. The reduction applies to senders only. The 
recommended algorithm for computing this minimum interval is 360 
divided by the RTP session bandwidth, in kbps. For bandwidths larger 
than 72 kbps, this interval is less than 5 seconds. 


This test verifies the ability of an implementation to use a lower 
RTCP minimum interval when it is a sender in a high bandwidth 
session. The test can only be run on implementations that support 
this reduction, since it is optional. 


The RTP implementation is configured to join the session as a sender. 


The session is configured to use 360 kbps. If the recommended 
algorithm for computing the reduced minimum interval is used, the 
result is a 1 second interval. If the RTP implementation uses a 


different algorithm, the session bandwidth should be set in such a 
way to cause the reduced minimum interval to be 1 second. 


Once joining the session, the RTP implementation should begin to send 
both RTP and RTCP packets. The interval between RTCP packets is 
measured and stored until 100 intervals have been collected. 

The test is deemed successful if the smallest interval is no less 
than 1/2 a second, and the largest interval is no more than 1.5 
seconds. The average should be close to 1 second. 


3 RTP translators 


RTP translators should be tested in the same manner as end systems, 
with the addition of the tests described in this section. 


The architecture for testing RTP translators is shown in Figure 3. 


forpren oa aa a + 

HS Se SSS + RTP Translator +----- + 

| +----------------- + | 
+------- +-------- + +------- +-------- + 
| First RTP | | Second RTP | 
| implementation | | implementation | 
4+---------------- + 4+---------------- + 

Figure 3: Testing architecture for translators 
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The first RIP implementation is instructed to send data to the 
translator, which forwards the packets to the other RTP 


implementation, after translating then as desired. It should be 
verified that the second implementation can playout the translated 
packets. 


It should be verified that the packets received by the second 
implementation have the same SSRC as those sent by the first 
implementation. The CC should be zero and CSRC fields should not be 
present in the translated packets. The other RTP header fields may 
be rewritten by the translator, depending on the translation being 
performed, for example 


o the payload type should change if the translator changes the 
encoding of the data 


o the timestamp may change if, for example, the encoding, 
packetisation interval or framerate is changed 


o the sequence number may change if the translator merges or 
splits packets 


Oo padding may be added or removed, in particular if the 
translator is adding or removing encryption 


o the marker bit may be rewritten 


If the translator modifies the contents of the data packets it should 
be verified that the corresponding change is made to the RTCP 
packets, and that the receivers can correctly process the modified 
RTCP packets. In particular 


o the SSRC is unchanged by the translator 


o if the translator changes the data encoding it should also 
change the octet count field in the SR packets 


o if the translator combines multiple data packets into one it 
should also change the packet count field in SR packets 


o if the translator changes the sampling frequency of the data 
packets it should also change the RTP timestamp field in the SR 
packets 


o if the translator combines multiple data packets into one it 
should also change the packet loss and extended highest 
sequence number fields of RR packets flowing back from the 
receiver (it is legal for the translator to strip the report 
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blocks and send empty SR/RR packets, but this should only be 
done if the transformation of the data is such that the 
reception reports cannot sensibly be translated) 


o the translator should forward SDES CNAME packets 

o the translator may forward other SDES packets 

o the translator should forward BYE packets unchanged 
o the translator should forward APP packets unchanged 


When the translator exits it should be verified to send a BYE packet 
to each receiver containing the SSRC of the other receiver. The 
receivers should be verified to correctly process this BYE packet 
(this is different to the BYE test in section 2.3.3 since multiple 
SSRCs may be included in each BYE if the translator also sends its 
own RTCP information). 


4 RTP mixers 


RTP mixers should be tested in the same manner as end systems, with 
the addition of the tests described in this section. 


The architecture for testing RTP mixers is shown in Figure 4. 


The first and second RTP implementations are instructed to send data 
packets to the RTP mixer. The mixer combines those packets and sends 
them to the third RIP implementation. The mixer should also process 
RTCP packets from the other implementations, and should generate its 
own RTCP reports. 


+---------------- + 
Second RTP 
implementation 
+------- +-------- + 
| +----------- + 
+------- PIRTP Mixer +>S-== + 
+----------- + 
+------- +-------- + +------- +-------- + 
| First RTP | | Third RTP | 
| implementation | | implementation | 
+---------------- + +---------------- + 
Figure 4: Testing architecture for mixers 
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It should be verified that the third RTP implementation can playout 
the mixed packets. It should also be verified that 


o the CC field in the RTP packets received by the third 
implementation is set to 2 


o the RTP packets received by the third implementation contain 2 
CSRCs corresponding to the first and second RTP implementations 


o the RTP packets received by the third implementation contain an 
SSRC corresponding to that of the mixer 


It should next be verified that the mixer generates SR and RR packets 
for each cloud. The mixer should generate RR packets in the 
direction of the first and second implementations, and SR packets in 
the direction of the third implementation. 


It should be verified that the SR packets sent to the third 
implementation do not reference the first or second implementations, 
and vice versa. 


It should be verified that SDES CNAME information is forwarded across 
the mixer. Other SDES fields may optionally be forwarded. 


Finally, one of the implementations should be quit, and it should be 
verified that the other implementations see the BYE packet. This 
implementation should then be restarted and the mixer should be quit. 
It should be verified that the implementations see both the mixer and 
the implementations on the other side of the mixer quit (illustrating 
response to BYE packets containing multiple sources). 


5 SSRC collision detection 


RTP has provision for the resolution of SSRC collisions. These 
collisions occur when two different session participants choose the 
same SSRC. In this case, both participants are supposed to send a 


BYE, leave the session, and rejoin with a different SSRC, but the 
same CNAME. The purpose of this test is to verify that this function 
is present in the implementation. 


The test is straightforward. The RTP implementation is made to join 
the multicast group as a receiver. A test instrument waits for the 


first RTCP packet. Once it arrives, the test instrument notes the 
CNAME and SSRC from the RTCP packet. The test instrument then 
generates an RTCP receiver report. This receiver report contains an 


SDES chunk with an SSRC matching that of the RTP implementation, but 
with a different CNAME. At this point, the implementation should 
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send a BYE RTCP packet (containing an SDES chunk with the old SSRC 
and CNAME), and then rejoin, causing it to send a receiver report 
containing an SDES chunk, but with a new SSRC and the same CNAME. 


The test is deemed successful if the RTP implementation sends the 
RTCP BYE and RTCP RR as described above within one minute of 
receiving the colliding RR from the test instrument. 


6 SSRC Randomization 


According to the RTP specification, SSRC’s are supposed to be chosen 
randomly and uniformly over a 32 bit space. This randomization is 
beneficial for several reasons: 


o It reduces the probability of collisions in large groups. 


o It simplifies the process of group sampling [3] which depends 
on the uniform distribution of SSRC’s across the 32 bit space. 


Unfortunately, verifying that a random number has 32 bits of uniform 
randomness requires a large number of samples. The procedure below 
gives only a rough validation to the randomness used for generating 
the SSRC. 


The test runs as follows. The RTP implementation joins the group as 
a receiver. The test instrument waits for the first RTCP packet. It 
notes the SSRC in this RTCP packet. The test is repeated 2500 times, 
resulting in a collection of 2500 SSRC. 


The are then placed into 25 bins. An SSRC with value X is placed 
into bin FLOOR(X/(2**32 / 25)). The idea is to break the 32 bit 
space into 25 regions, and compute the number of SSRC in each region. 
Ideally, there should be 40 SSRC in each bin. Of course, the actual 
number in each bin is a random variable whose expectation is 40. 

With 2500 SSRC, the coefficient of variation of the number of SSRC in 
a bin is 0.1, which means the number should be between 36 and 44. 

The test is thus deemed successful if each bin has no less than 30 
and no more than 50 SSRC. 


Running this test may require substantial amounts of time, 
particularly if there is no automated way to have the implementation 
join the session. In such a case, the test can be run fewer times. 
With 26 tests, half of the SSRC should be less than 2**31, and the 
other half higher. The coefficient of variation in this case is 0.2, 
so the test is successful if there are more than 8 SSRC less than 
2**31, and less than 26. 
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In general, if the SSRC is collected N times, and there are B bins, 
the coefficient of variation of the number of SSRC in each bin is 
given by: 


coeff = SQRT( (B-1)/N ) 
7 Security Considerations 


Implementations of RTP are subject to the security considerations 
mentioned in the RTP specification [1] and any applicable RTP profile 
(e.g., [2]). There are no additional security considerations implied 
by the testing strategies described in this memo. 
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